Threats tagged 'ghsa-cw23-qwr7-c655'

A command injection vulnerability exists in nearai ironclaw up to version 0.29.1 in the function classify_command_risk within src/tools/builtin/shell.rs. This vulnerability allows remote attackers with low privileges to execute arbitrary commands. Public exploit code is available. A patch identified by commit a1d7c3ba428ed575900469b207fb5668725f9a71 has been released to address this issue.